Re: Project Chroma: A color code for the state ofcyber security

[n3td3v <xploitable () gmail com>]

Maybe he thinks the same as you and is making fun of the Department of
Homeland Security, SANS Internet Storm Center etc.

On Mon, Dec 1, 2008 at 4:27 PM, rholgstad <rholgstad () gmail com> wrote:
> and how does making a color based on these inputs protect people?
>
> Mike C wrote:
> > On Mon, Dec 1, 2008 at 4:21 AM, vulcanius <vulcanius () gmail com> wrote:
> >
> > > By the way, I also noticed that the new site for your project has the
> > > current threat level as yellow. Is it safe to assume that you've already got
> > > your metric systems in place and running?
> >
> > Yes,
> >
> > We do have a working framework for color code generation. The inputs
> > to this function include
> >
> > *exploits released in the past week
> >   - The severity of the exploit
> >   - The application it was in
> >   - The language
> >   - estimated users of the software
> >
> > *The previous week's color
> >
> > *Localized nature of exploits.
> >
> > We cannot comment more on this until it is refined and standardized.
> > If you are (or know) an antivirus vendor, please contact me offline to
> > move ahead.
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/